Florida Department of Corrections 
Information Security Awareness 

SECURITY is your responsibility! To be a user of the computer network is a 
is through CDC or the LAN. As such, you must respect and guard your access to and use of these 
capabilities. All staff has a responsibility to protect the Florida Department of Corrections (DC) data 
information and equipment from damage, loss, or compromise. This is part of Information Security 
Awarene s^^ The DC procedure on Security is to be viewed on the intranet at 

is a restricted document which may not be printed. 

Information security awareness will result in protecting DC’s computer-based security resources 
including: 

1 . Software - Top Secret Security Software provides programs that allow users to accomplish 
specific tasks pertaining to Inmate information. 

2. Data - the information stored in the Top Secret Security database, as well as computer print 
outs, and 

3. Media - the magnetic devices that store data and programs. 

The advent of Information Systems Technology has made a big difference in the way organizations 
work. As we have become more reliant on the systems spawned from this technology, it has become 
crucial that they, and the information processed, be protected. 

Why is it important? 

Protecting our computer-based resources is one of the most important jobs that you, as a DC employee, 
have. Employees depend on each other to keep security in mind at all times. One individual's careless 
security practices can affect the rest of us. 

Chapter 815 of the Florida Statues references unauthorized use, alteration, or destruction of 
information assets. IT IS A FELONY! It is important to be aware of your responsibility in keeping 
the data contained in the database secure. You can help to accomplish this by: 

1 . Never divulging your password to anyone or placing a memo with the password where 
it is visual to others. 

2. Never leaving your computer or terminal opened to be viewed by others when you are 
in the database. 

3. Never attempting access to screens or information, which are not necessary to the 
performance of your job. 

4. Never giving your signon into the CDC or LAN system to another person to use. 

5. Never providing access to DC information for another person who does not have a right 
to the information. If their access allowed this information, they would not have to ask 
you. 
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What can jeopardize an information system? 


Errors - Everyone makes mistakes, but mistakes can be costly when they affect costly computer-based 
resources. 

Spies - Individuals can use networking systems to obtain information that may not be public record. 
Hackers - Individuals who gain access to computer systems illegally. 

The Insider - An authorized user or employee. 

Data can be threatened by an "insider" who: 

• Doesn't follow proper procedures, 

• Uses data for illegal purposes 

• Installs a computer virus 

• Is inadequately trained 

• Misuses hardware and/or software to "get back at" FDC 
Malicious Logic - Viruses 

Natural Hazards - Computer-based resources can be lost or damaged by: 

• Fire. 

• Flood. 

• Smoke. 

• Static electricity. 

• Temperature extremes. 

• Magnetic forces. 

• Water, or other liquids. 

What are examples of misuses to Information Systems? 

Here are examples of misusing information systems: 

• Theft of hardware or software. 

• Using someone else's password. 

• Damaging or destroying hardware or software. 

• Deliberately slowing the processes of the computer system. 

• Violating Policies and Procedures while using a computer or terminal belonging to DC. 

• Deliberately erasing data that should not be deleted. 

Passwords 

Your password and user id is your key to the CDC Computer System. Use it properly and protect it. 

• Choose a password that's unique; mix letters and numbers, or you could select a famous 
saying and choose every 4 1 * 1 letter. 
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• Keep your password confidential - it's your business and no one else's! 

• Make sure it is at least 6-8 characters in length for CDC and not more than 14 for LAN. 

• Department of Correction Procedure 206.007 requires you change passwords every 90 
days in both the Local Area Network and the CDC systems. 

If you think someone is using your logon id and your password, change it immediately and contact 
your supervisor. Also, report the situation to the Bureau of Information Technology Security section at 
488-6316. 

What are my responsibilities as a CDC User? 

• Pay attention to your work transactions. Incorrect information can damage an inmate's 
data. 

• Shred computer reports or forms that contain sensitive information. 

• If work folders contain sensitive data, protect them from being taken by unauthorized users. 

Who can I contact on any misuse , violation , or just Security questions? 

You can contact your supervisor who can contact your organizational Security Coordinator. Each 
department/section within DC has an appointed Security Coordinator. 

The Security Coordinator serves as the focal point for concerns and they also help to ensure that the 
users are able to perform their required task by providing correct access to the data. 

Check with your Security Coordinator for information if you have any questions. 

What are some Information Systems security tips? 

• Don’t use unauthorized software; it could damage legitimate programs and data. 

• Protect software - don't leave it where it could be altered or stolen. 

• Don’t duplicate software or violate copyrights in any way. 

• When using terminals, which must remain on line at all times, always log-off when leaving 
your station - even for a moment. 

• If you are using a personal computer, Procedure 206.007 requires that you use a Microsoft 
windows screen saver with a password set to a lock interval of not more than 15 minutes. 
Doing so will greatly reduce your exposure to risk. 

• Don’t leave sensitive information in your PC or terminal. 

One of the best ways to protect DC's Information Systems is to stay alert! 
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